Welcome to the LimeSurvey Community Forum

Ask the community, share ideas, and connect with other LimeSurvey users!

Survey records responses by gives 403 invalid access token on submission

More
5 days 16 hours ago #271410 by sysco
Yes, I have two customers who paid for CU. We arrived 'til 6.15.6, so I guess we'll have the next one too (each has yet available update on their keys).
Browser cache changed nothing, I'll try asset one, thx.

Please Log in to join the conversation.

More
5 days 16 hours ago #271411 by holch
Yeah, even if they wouldn't have enough keys, the update should still show. You just couldn't update.

Maybe it is rolled out in waves, so that the servers are not "overwhelmed"? No idea.

I don't think that the different caches should have an impact. but it is easy enough to do to exclude this possibility.

Help us to help you!
  • Provide your LS version and where it is installed (own server, uni/employer, SaaS hosting, etc.).
  • Always provide a LSS file (not LSQ or LSG).
Note: I answer at this forum in my spare time, I'm not a LimeSurvey GmbH employee.

Please Log in to join the conversation.

More
5 days 15 hours ago #271412 by holch
Problem doesn't seem to be solved with 6.15.7, as a user in the German forum is reporting the same issue and says he/she has 6.15.7:

forums.limesurvey.org/forum/german-forum...-endnachricht#271391

Help us to help you!
  • Provide your LS version and where it is installed (own server, uni/employer, SaaS hosting, etc.).
  • Always provide a LSS file (not LSQ or LSG).
Note: I answer at this forum in my spare time, I'm not a LimeSurvey GmbH employee.
The following user(s) said Thank You: sysco

Please Log in to join the conversation.

More
5 days 15 hours ago #271413 by sysco
No luck with asset cach either.

Please Log in to join the conversation.

More
5 days 15 hours ago #271414 by holch

Bug 20222 seems to say the 6.15.7 fixes the problem too:
bugs.limesurvey.org/view.php?id=20222
 
In bugs.limesurvey.org/view.php?id=20235 the reporter uses 6.15.7, so this issues seems not entirely be fixed yet.

I would suggest to comment on this bug 20235 as well, to increase visibility/urgency.

Help us to help you!
  • Provide your LS version and where it is installed (own server, uni/employer, SaaS hosting, etc.).
  • Always provide a LSS file (not LSQ or LSG).
Note: I answer at this forum in my spare time, I'm not a LimeSurvey GmbH employee.

Please Log in to join the conversation.

More
2 days 22 hours ago - 2 days 19 hours ago #271429 by DPF-QualiQuan
J'ai le même problème depuis que j'ai mis à jour avec confort upate vers LimeSurvey Community Edition Version 6.15.7+250820

Bonjour à tous,Je partage ici mon retour d’expérience concernant l’erreur 403 “Invalid access token” qui survient à la fin d’un questionnaire, alors que les réponses sont bien enregistrées.

Étape 1 – Modification du bloc

Dans le fichier
Code:
SurveyRuntimeHelper.php
, à l’intérieur de la fonction
Code:
public function run($surveyid, $args)
, j’ai d’abord essayé de modifier le bloc qui gère le transfert du token de la session vers la réponse.

L’idée était de forcer l’enregistrement du
Code:
filltoken
dans
Code:
$oSurveyResponse->token
et de gérer le nettoyage de session différemment.Malheureusement, cette modification n’a pas suffi : j’avais toujours l’erreur 403 en fin de parcours.

Étape 2 – Commenter la ligne critique

Finalement, le vrai déclencheur de l’erreur était la ligne qui supprime trop tôt les tokens de la session.

Dans mon code, cela correspondait à :
Code:
unset($_SESSION[$this->LEMsessid]['filltoken'], $_SESSION[$this->LEMsessid]['token']);
J’ai simplement commenté cette ligne :
Code:
// unset($_SESSION[$this->LEMsessid]['filltoken'], $_SESSION[$this->LEMsessid]['token']); // commenté pour éviter l’erreur 403

Puis => Vider le cache de limesurvey

Résultat : Depuis cette modification, le problème est résolu :
  • le questionnaire se termine normalement,
  • il n’y a plus de 403,
  • les mails de confirmation et de notification sont envoyés correctement.
Je pense que le problème vient du fait que LimeSurvey supprime le token de la session avant d’avoir fini d’afficher la page de fin et de traiter la logique associée.

En attendant une correction dans le core, ce contournement permet de faire fonctionner correctement les enquêtes.

Eric
Last edit: 2 days 19 hours ago by DPF-QualiQuan.

Please Log in to join the conversation.

More
16 hours 6 minutes ago #271450 by holch
Please only English in this section of the forum.

Help us to help you!
  • Provide your LS version and where it is installed (own server, uni/employer, SaaS hosting, etc.).
  • Always provide a LSS file (not LSQ or LSG).
Note: I answer at this forum in my spare time, I'm not a LimeSurvey GmbH employee.

Please Log in to join the conversation.

Moderators: holchtpartner

Lime-years ahead

Online-surveys for every purse and purpose